30x-seo-keywords
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executecurlcommands for interacting with the DataForSEO API endpoints. - [CREDENTIALS_UNSAFE]: The skill accesses the sensitive file path
~/.config/dataforseo/authto retrieve authentication tokens for API requests. This is consistent with the skill's stated purpose of providing an interface for a third-party SEO service. - [PROMPT_INJECTION]: The skill processes data from an external source, which creates a surface for indirect prompt injection.
- Ingestion points: API responses from
api.dataforseo.comprocessed via curl. - Boundary markers: None identified in the provided markdown examples.
- Capability inventory:
Bash(curl),Read. - Sanitization: None identified within the command structures.
Audit Metadata